Hawser

The secure line to your servers

A fast, small, open-source SSH & SFTP client for the desktop. Terminal, file transfer, and tunnels in one window — plus a tamper-evident audit log, searchable history, and a heads-up when a host's config changes since you last connected. Your credentials stay in your OS keychain; nothing phones home.

Free & open source Windows · Linux · macOS Tauri + Rust
Hawser app icon
PUBLIC BETA

Hawser is in open beta. Windows and Linux builds are on GitHub Releases; the source is MIT-licensed and fully auditable. A signed macOS build is on the way.

Get the latest build →

Why Hawser

Built for people who connect to real servers and want to trust the tool doing it.

🔑

Your keys stay yours

Passwords and passphrases live in the native OS keychain — macOS Keychain, Windows Credential Manager, or the Linux Secret Service. Never in a plaintext config file.

🧾

Tamper-evident audit log

Every connect, transfer, key install, and credential change is appended to a hash-chained log whose head is sealed in your keychain. One click verifies the chain — or shows exactly where it was altered.

🔍

Searchable history

Find that command or output from three weeks ago on any host. Session history is recorded locally and searchable in-app — no more scrolling a dead terminal buffer.

📡

Know what changed

Opt in per host, and Hawser snapshots the config it reads on connect — then flags, with a diff, anything that changed since your last visit. Catch drift before it bites.

🧰

Pure-Rust SSH

The SSH stack is russh — no system OpenSSL or libssh2 to patch, no vcpkg, no C toolchain surprises. Small binary, reproducible builds.

💡

Advisor-only AI

An optional AI panel suggests commands and explains output using your own API key. It never runs anything on its own — you stay in the loop for every keystroke that touches a server.

Everything in one window

A terminal, a file manager, and a key manager that share state.

Terminal

  • Interactive SSH sessions
  • Saved hosts with one-click connect
  • Run & capture command output
  • known_hosts verification

SFTP

  • Browse remote files
  • Upload & download with progress
  • Rename, delete, make directories
  • Owner-only permissions on writes

Keys & access

  • Generate Ed25519 keys in-app
  • Install a public key on a host (copy-id)
  • Credentials in the OS keychain
  • Export / import your host list

Tunnels

  • Port forwarding
  • Reach services behind a jump box
  • Per-host configuration

Trust & history

  • Hash-chained audit log + verify
  • Searchable session history
  • Config-change detection with diff

AI advisor (optional)

  • Bring your own API key
  • Suggests & explains, never auto-runs
  • Key stored in the keychain

Download

Free, open source, and distributed straight from GitHub.

🟩

Windows

Installer + portable

Latest release →

🐧

Linux

AppImage + .deb

Latest release →

🍎

macOS

Signed build coming soon

Watch the repo →

This is a public beta. Builds are not yet notarized on every platform, so your OS may warn on first launch — the full source is on GitHub if you'd rather build it yourself.

Frequently Asked Questions

What Hawser is, where your data lives, and how to trust it

General

A desktop SSH and SFTP client: a terminal, a remote file browser, key management, and tunnels in one window. It adds a few things most clients don't — a tamper-evident audit log, searchable session history, and a diff of what changed on a host since you last connected.

Not quite — it's an SSH connection manager with a terminal built in. The point is managing many hosts, transfers, and keys with trust and history, rather than being a drop-in replacement for your local shell terminal.

Nothing. Hawser is free and open source under the MIT license. No account, no subscription, no paid tier.

Windows and Linux builds are available now on GitHub Releases. A signed macOS build is in progress. It's built with Tauri + Rust, so the binary is small and the same code runs across all three.

Security & trust

In your operating system's native secret store: the macOS Keychain, the Windows Credential Manager, or the Linux Secret Service. Hawser never writes passwords or passphrases to a plaintext config file.

Each entry is hashed together with the previous entry's hash, forming a chain — change or remove any entry and every entry after it stops verifying. The chain's head is sealed into your OS keychain as an external anchor, so even deleting or rewriting the whole file is detectable. It records metadata only (host, user, path, byte counts) — never passwords or command output. It's tamper-evident, not tamper-proof: someone with access to both the file and your unlocked keychain could still forge it, and the docs say so plainly.

No telemetry, no analytics, no tracking. The only network connections it makes are the SSH/SFTP sessions you start — and, if you turn on the AI panel, calls to the AI provider whose key you supplied. Everything else stays on your machine.

It's advisor-only. With your own API key, it can suggest commands and explain output, but it never executes anything itself — you review and run every command. The key is stored in the keychain alongside your other secrets, never logged.

The source

Yes — it's all on GitHub, MIT-licensed. The SSH layer uses the pure-Rust russh crate, so there's no system OpenSSL or libssh2 to install and the build is reproducible.

Open an issue on the GitHub repo. Because it's early beta, that feedback shapes what ships next.

Connect with confidence.

Free, open source, and on GitHub now. Windows & Linux today, macOS soon.

Download beta → View source